Critical

SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities

SecurityWeek

August 11, 2026 at 2:14 PM

Overview

SAP has rolled out 28 new security notes and updated two others to address vulnerabilities in its software. Among these, four notes focus on critical issues related to code injection and memory corruption. These vulnerabilities could allow attackers to execute arbitrary code or crash systems, posing significant risks to organizations using SAP products. Companies relying on SAP software should prioritize applying these patches to protect their systems and sensitive data from potential exploitation. This update underscores the need for ongoing vigilance in maintaining software security.

Key Takeaways

Affected Systems: SAP software products, specific versions not mentioned.
Action Required: Organizations should apply the new security notes and updates provided by SAP.
Timeline: Newly disclosed

Original Article Summary

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities appeared first on SecurityWeek.

Impact

SAP software products, specific versions not mentioned.

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Organizations should apply the new security notes and updates provided by SAP.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Update, Critical.

Read Original Article

Related Coverage

Critical Citrix NetScaler auth bypass now leveraged in attacks

BleepingComputer

Attackers are now exploiting a significant vulnerability in Citrix NetScaler, identified as CVE-2026-19490, which allows for authentication bypass. This flaw poses a severe risk as it could enable unauthorized access to systems using affected versions of NetScaler. Companies that utilize Citrix NetScaler for application delivery or networking are particularly at risk, as this vulnerability can compromise their security posture. Security researchers from Previdian have reported that the flaw is actively being exploited in the wild, indicating an urgent need for users to assess their systems. Organizations should prioritize applying any available patches or implementing mitigation strategies to protect against potential breaches.

Sep 4, 2026

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

The Hacker News

PostgreSQL has issued updates to fix a serious security vulnerability, tracked as CVE-2026-6471, that has existed for 12 years. This flaw allows users with the REPLICATION attribute to execute arbitrary code as the operating system user running the database server. The vulnerability affects several versions of PostgreSQL, specifically those released before 18.6, 17.11, 16.15, 15.19, and 14.24. The potential for attackers to exploit this flaw poses a significant risk to database security, making it crucial for users to apply the updates promptly. The vulnerability was introduced with the logical decoding feature in PostgreSQL 9.4, highlighting the importance of regularly updating database systems to protect against long-standing vulnerabilities.

Sep 4, 2026

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

The Hacker News

A new Linux toolkit, dubbed 'ted', has been discovered embedded within altered HAProxy load balancers used by two South Korean organizations. This malicious implant allows attackers to intercept web traffic and manipulate the pages seen by certain visitors. The presence of 'ted' in the HAProxy binaries indicates that it does not exploit a vulnerability in HAProxy itself; instead, it requires the attackers to execute code on the affected systems. This incident raises significant concerns as it demonstrates how attackers can compromise widely used software to conduct web traffic interception. Organizations using HAProxy should be vigilant and ensure their installations are secure to prevent such intrusions.

Sep 4, 2026

AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

darkreading

Software vendors are facing a surge in bug reports that are revealing serious flaws in their secure-by-design promises. This influx of reports is overwhelming companies, leading to delays in addressing and disclosing vulnerabilities. As developers rush to keep up, the risk of undiscovered vulnerabilities increases, which can leave users exposed to potential attacks. This situation raises concerns about the readiness of vendors to manage and respond to security issues effectively. The article emphasizes the need for better processes to handle the growing number of vulnerabilities in software products, suggesting that without improvements, significant security risks may persist.

Sep 4, 2026

G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules

Infosecurity Magazine

The G7 has called on its member countries to develop national strategies focused on transitioning to quantum-safe encryption methods. This push comes as concerns grow about the potential for quantum computing to break current encryption methods, which would jeopardize the security of sensitive data across various sectors. The G7's recommendation emphasizes the urgency for governments to prepare for a future where quantum computers could compromise existing cybersecurity measures. By adopting new encryption standards, countries aim to safeguard personal information, financial transactions, and national security. This initiative is crucial as it seeks to protect against future vulnerabilities that quantum technologies could exploit.

Sep 4, 2026

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

The Hacker News

Researchers from Wordfence have discovered that hackers are taking advantage of two serious vulnerabilities in popular WordPress plugins: Super Forms and Elementor Pro. The first vulnerability, identified as CVE-2026-14894, has a CVSS score of 9.8 and allows unauthenticated attackers to upload files of any type due to a lack of file type validation in the Super Forms plugin. This flaw has led to over 440,000 exploit attempts. The Elementor Pro plugin is also affected, although specific details about its vulnerabilities were not provided. This situation is alarming for website owners using these plugins, as successful exploitation can lead to unauthorized access and potential data breaches. Website administrators should take immediate action to secure their sites against these threats.

Sep 4, 2026